CVE Vulnerability Catalog

The mint library (Elixir) has a resource allocation vulnerability allowing a malicious HTTP/2 server to exhaust client memory and cause denial of service. Affected versions are from 1.1.0 before 1.10.2.

A cross-site scripting (XSS) vulnerability in Agentis by Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. is caused by improper neutralization of input during web page generation. It allows XSS targeting HTML attributes.

Improper parameter handling in NeuVector allows any authenticated user with namespaced Runtime Policies (write) permission or anyone with access to NeuVector’s internal gRPC certificate key pair to inject OS commands in the privileged enforcer container, leading to complete compromise of the worker node.

A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container, transfers the archive, and unpacks it locally; a malicious tar can execute arbitrary code and write files to arbitrary paths on the user's machine.

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to arbitrary file write via HA Failover Config sync upload, leading to remote code execution.

A vulnerability was identified in Thinkware U3000 up to 1.02.04 in the get_file function of /tmp/wpa_supplicant.conf in the TCP Service component. The manipulation leads to improper access controls, and remote exploitation is possible. The exploit is publicly available and might be used.

A vulnerability was determined in Thinkware U3000 up to 1.02.04 affecting the PUT_FILE function in /tmp/wpa_supplicant.conf of the TCP Service component. Manipulation of the path argument can lead to improper access controls.

A security vulnerability has been detected in refly-ai refly up to 1.1.0 affecting some unknown processing of apps/api/src/modules/config/app.config.ts of the JWT Token Handler component. Manipulation with the input 'test' leads to hard-coded credentials.

Apache Karaf's instance-management service (InstanceServiceImpl) builds the command line used to launch a child Karaf JVM by string concatenation, then executes it through /bin/sh (Unix) or cscript (Windows). The caller-supplied javaOpts value is spliced into that string unquoted, allowing shell metacharacters (;, |, `, $(...)) to be interpreted by the shell, leading to arbitrary OS command execution as the Karaf process user.

Google Cloud Application Integration versions prior to 2026-06-28 contain a Deserialization of Untrusted Data vulnerability in the JavaScript task. An authenticated user with standard permissions can run arbitrary code on shared production servers by bypassing parameter guards with a specially crafted script.

A Confused Deputy vulnerability in the EmailTask component in Google Cloud Application Integration versions prior to 2026-06-30 on Google Cloud Platform allows an authenticated attacker to read and exfiltrate arbitrary Google-internal files via a crafted attachment file path. This vulnerability was patched on 30 June 2026, and no customer action is needed.

Google Cloud Application Integration versions prior to 2026-06-17 contain an Incorrect Authorization vulnerability in task configuration. An authenticated Google Cloud user can execute arbitrary internal RPCs from inside Google's production network under a privileged identity using an internal-only task type.

Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI Central host.

ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution. The vulnerability occurs during the processing of DNS records.

ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execution. The vulnerability occurs in the context of DNS query resolution.

A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813, affecting the HTTP Multipart Form-Data Parser component. Performing a manipulation results in denial of service, and the attack can be carried out remotely. The exploit has been released publicly.

A vulnerability was identified in FAST FAC1900R version 20190827_2.0.2.2 in the copy_msg_element function of the devdiscover Service component. Manipulation leads to a stack-based buffer overflow, and the attack can be executed remotely. The exploit is publicly available and may be used; the vendor did not respond to the disclosure.

A vulnerability was determined in FAST FAC1200R version 5.0_20201119_1.0.2 in the MmtAtePrase function of the MmtAtePrase Parser component. Manipulation causes a stack-based buffer overflow, and remote exploitation is possible. The exploit has been publicly disclosed and may be utilized; the vendor did not respond to the disclosure.

LDAPCache and LDAPBackingEngine build LDAP search filters by substituting %u, %dn, and %fqdn into administrator-configured filter templates (userFilter, roleFilter) without full RFC 4515 escaping. Before the fix, only double backslashing was applied, which does not escape *, (, ), and NUL. A login name containing these characters can alter the filter structure, e.g. turning an equality match into a wildcard match or closing/reopening filter clauses.

Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the parameter 'Nombre Completo' in the endpoint '/administrator/index.php?option=com_virtuemart&page=admin.user_list'. Successful exploitation could allow an authenticated attacker to inject malicious code and execute it in users' browsers without their consent.